Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account and identity data — when you register or sign in with Google, we receive your name, email address, profile photo, preferred language, and a unique Google account identifier. If you register with an email address or phone number, we collect those details and a securely hashed password.
• Business and financial data — information you and your team enter into the Service, such as your company profile, branches, customers and suppliers (parties), products and inventory, invoices, purchases, payments, ledgers, cheques, and tax registration details (for example NTN/STRN).
• Usage and device data — log information such as IP address, browser type, device identifiers, pages viewed, and the dates and times of your activity, collected to keep the Service secure and reliable.
• Support communications — messages, attachments, and contact details you share when you request a demo or contact our support team.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you when you sign in;
• Provide, operate, maintain, and improve the Service and its features;
• Process and store the business records you create, and generate reports, dashboards, and documents;
• Communicate with you about your account, security alerts, updates, and support requests;
• Detect, prevent, and investigate fraud, abuse, and security incidents;
• Comply with applicable laws and respond to lawful requests from regulators and authorities.

We do not sell your personal information, and we do not use the contents of your business or financial records for advertising.

3. Google Sign-In and Limited Use

E-Khata Cloud offers Google Sign-In so you can access your account without a separate password. When you choose this option, Google shares your basic profile information with us based on the scopes you approve — specifically your OpenID identifier, email address (userinfo.email), and basic profile such as your name and profile picture (userinfo.profile).

We use this information solely to create and secure your account, identify you, and personalize your experience. We request only the minimum scopes required to sign you in.

E-Khata Cloud's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not allow humans to read this data unless we have your consent, it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymized.

You can revoke E-Khata Cloud's access to your Google account at any time from your Google Account security settings at myaccount.google.com/permissions.

4. How We Share Information

We share information only in the limited circumstances described below:

• Service providers — trusted vendors who process data on our behalf to host and operate the Service, including Google Cloud for hosting and infrastructure. These providers are bound by contractual obligations to protect your data and may only use it to provide services to us.
• Legal and regulatory requirements — where required by law, regulation, legal process, or enforceable governmental request, including requests from Pakistani tax and regulatory authorities such as the FBR, PRA, SRB, and SECP.
• Protection of rights and safety — to enforce our Terms of Service, protect the rights, property, or safety of E-Khata Cloud, our users, or the public, and to prevent fraud or security threats.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case we will continue to protect your information and notify you of any change in control or applicable policy.

Your business data is yours. We act as a processor of the records you enter and do not share them with other customers.

5. Data Security

We use technical and organizational measures designed to protect your information, including encryption in transit, hashed credentials, access controls, multi-tenant data isolation scoped to your business, and hosting on Google Cloud's secure infrastructure.

No method of transmission or storage is completely secure. While we work hard to protect your data, we cannot guarantee absolute security. Please keep your password and devices secure and notify us immediately of any unauthorized use of your account.

6. Data Retention

We retain your account and business data for as long as your account is active or as needed to provide the Service. We may retain certain records for longer where required to comply with legal, tax, accounting, or regulatory obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymize it.

7. Your Rights and Choices

Subject to applicable law, you may:

• Access and review the personal information associated with your account;
• Correct or update inaccurate or incomplete information;
• Export your business data in a usable format;
• Request deletion of your account and associated personal data, subject to legal retention requirements;
• Withdraw consent, including revoking Google Sign-In access, at any time.

To exercise these rights, contact us using the details in the "Contact Us" section below.

8. International Data Transfers

E-Khata Cloud is operated from Pakistan and hosted on Google Cloud. Your information may be processed and stored on servers located in regions outside Pakistan. Where data is transferred internationally, we take steps to ensure it remains protected in accordance with this policy.

9. Children's Privacy

The Service is intended for businesses and users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences (such as language), maintain security, and understand how the Service is used. You can control cookies through your browser settings, although disabling some cookies may affect how the Service works.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Your continued use of the Service after an update means you accept the revised policy.

12. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or your data, contact us at:

• Email: privacy@ekhata.ai
• Support: support@ekhata.ai
• Website: ekhata.ai